At work, we set ambitious goals and do not rest on our laurels. That's why it's so important for us that every member of the large Avito team shares the company culture. The Manifesto, which brings together our main guidelines — mission, values, principles of work — helps us to immerse ourselves in it.
About the team
The Product Security unit ensures the security of all Avito products from idea to production. We have established a mature secure development process, which includes static and dynamic application analysis, search for secrets and personal data, dependency analysis, and many other solutions for the fastest and most accurate problem detection possible. In addition to technical measures, we are actively developing the internal Security Champions community and the Bug Bounty program.
Your responsibilities
- Improve the existing S-SDLC: integrate new security solutions and develop existing ones.
- Participate in security checks and audits.
- Implement new processes in S-SDLC.
- Develop the bug bounty program.
- Consult development teams and manage risks.
We expect you to have
- Be well-versed in application vulnerability types and approaches to their elimination.
- Check controversial cases and do not rely solely on the assessment "it's all secure there."
- Have experience with security analysis tools and vulnerability scanners: intercepting proxies, DAST, SAST.
- Read code in Python and Go and understand how it works.
It would be great if you:
- Have experience writing rules for SAST and DAST.
- Have experience developing in Python and Go.
- Have professional OSCP or OSWE certifications.
Working with us means
- The opportunity to implement your ideas in a project with a multi-million audience.
- A talented, friendly team ready to support your initiatives.
- Powerful hardware, additional monitors, and everything you need for productive work.
- A transparent bonus system, a decent salary — the amount will be discussed at the interview.
- A personal training budget that can be spent on books, courses, and conferences.
- Healthcare: from the first day, you will have voluntary medical insurance with dental care; a therapist and a massage therapist are available in the office.
- Remote work or work from our cool offices — your choice.
